
$ rpki-client -vvvf rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
File: Z1qGdu030Wq7yi_vjqofI_JXsp8.mft (raw, json)
Hash identifier: sa282PJRcT0GgTSBfYk/z9KV0OejC5tMNvcCb78sKJg=
Subject key identifier: 59:31:1C:31:FF:02:C0:81:35:4A:4A:32:09:A3:4C:19:4B:34:C7:88
Authority key identifier: 67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
Certificate issuer: /CN=A91D56CA/serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Certificate serial: 18F2
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
Manifest number: 18D9
Signing time: Tue 06 Oct 2026 16:29:54 +0000
Manifest this update: Tue 06 Oct 2026 16:29:53 +0000
Manifest next update: Tue 13 Oct 2026 16:29:53 +0000
Files and hashes: 1: Z1qGdu030Wq7yi_vjqofI_JXsp8.crl (hash: vA6Zeyb4OHi5G57Qo/eo85Jmm9ENKJO48dO1MLM/9qM=)
2: A6DF4CF8C34B11ECAFB25A68C4F9AE02.roa (hash: rdOZCJ3dicwt2ZQgE2QnLuQhDeAJoxWmp9bzW22pmwI=)
3: 0EE83FA4C34611EC9290F072C4F9AE02.roa (hash: ZFGFBfx4/7JIn5J81VyjxgzCJGuEFQLjcxwfK1UOBRQ=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 13 Oct 2026 16:29:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 6386 (0x18f2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91D56CA, serialNumber=675A8676ED37D16ABBCA2FEF8EAA1F23F257B29F
Validity
Not Before: Oct 6 16:29:53 2026 GMT
Not After : Oct 13 16:29:53 2026 GMT
Subject: CN=6ac52202-9479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fd:28:8d:6d:a1:05:3b:d2:2f:77:9c:74:0c:
39:b8:6c:6b:92:ad:0f:75:4c:4f:b0:a7:e5:0f:b5:
0e:3c:00:53:fc:97:bb:2b:30:66:a5:84:c0:91:59:
c0:0b:61:83:e7:18:df:aa:e9:73:d0:e7:80:cc:d2:
11:87:08:cf:9a:2d:17:5e:29:16:e4:f7:f9:37:80:
83:f9:d2:f0:3b:ad:8e:66:2f:c1:bd:05:99:d4:b0:
c1:c2:84:a3:f7:b5:c7:e1:21:3a:24:74:70:98:de:
d0:39:df:75:f8:5e:4a:79:3d:31:2c:b7:c3:b1:10:
7b:9a:4f:08:7a:2f:58:cd:44:51:8b:2b:c9:e0:a1:
8f:8e:7d:67:fc:f9:a3:69:b2:ef:73:92:57:cf:a7:
b6:c3:48:72:5b:19:36:7a:db:4d:43:bb:37:f0:c3:
e0:5a:fa:31:ce:14:a0:70:df:18:0a:90:13:db:b8:
d7:a0:6b:16:52:28:41:f1:40:bc:41:dc:ca:2e:65:
71:61:67:9f:02:b0:9d:96:a3:6a:c7:73:da:c8:37:
42:13:76:7e:40:02:f3:73:0c:9c:7c:4f:a5:8c:7e:
ea:c6:af:66:15:fb:a4:c0:e0:00:8e:b9:6f:30:cb:
72:e0:75:9a:e1:9e:ae:40:b7:33:9b:e0:db:6d:1c:
ac:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:31:1C:31:FF:02:C0:81:35:4A:4A:32:09:A3:4C:19:4B:34:C7:88
X509v3 Authority Key Identifier:
keyid:67:5A:86:76:ED:37:D1:6A:BB:CA:2F:EF:8E:AA:1F:23:F2:57:B2:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Z1qGdu030Wq7yi_vjqofI_JXsp8.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D56CA/914E53F6C0D111E78D1EF82BC4F9AE02/Z1qGdu030Wq7yi_vjqofI_JXsp8.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
99:00:a9:b1:61:0d:50:27:62:e9:c0:ba:c6:e1:99:20:26:19:
32:0e:f9:ff:e2:df:c5:ac:f8:68:d9:b8:5c:f0:06:91:46:a7:
48:d9:f7:28:77:eb:45:66:24:65:85:05:02:26:f9:86:46:75:
4b:1a:41:7f:42:38:12:be:f0:f2:2b:39:06:a1:e3:cc:48:40:
0e:12:14:4b:31:7d:b0:f1:46:8f:64:05:4e:16:6f:5d:8a:a7:
bb:a2:36:fb:88:e5:45:72:27:c6:03:a7:f3:8e:33:5e:0d:4f:
b7:27:b4:1e:79:1e:1f:5f:59:0f:50:81:75:b4:93:03:85:a4:
78:87:73:3b:64:fb:5f:11:52:85:8a:f7:45:31:c6:21:32:be:
04:cf:31:ea:34:5d:32:0f:30:50:46:f2:07:82:b0:5f:29:59:
95:57:ff:e5:4d:52:49:79:ce:b0:d1:df:33:b1:62:13:c7:28:
f0:28:de:e4:df:2c:b8:48:d3:10:cf:5c:43:d9:23:88:c6:0c:
cd:ab:50:be:9f:03:4d:86:67:3d:2e:26:74:55:6b:09:a5:90:
0b:ba:e7:fd:93:2f:5c:14:7b:f9:bc:22:a0:53:94:11:af:3c:
8a:78:06:a5:40:00:51:dc:e2:82:3d:2b:be:c0:1f:34:e2:89:
52:5b:b1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 23:18:22 2026 by rpki-client